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CLAIMS 

A method for testing of a communication network 
having a plurality of end-points, using one or . more 
network\^agents coupled to the network at respective 
locat ions, \ the method comprising: 

specifying at least one packet filtering criterion; 

transmitting one or more data packets meeting the at 
least one criterion through the network from one of the 
end-point to another; 

intercepting \at least one of the data packets 
meeting the criterion using the network agents at one or 
more of the respective^ locations in the network traversed 
by the at least one of the data packets; 

recording .information regarding the at least one 
intercepted packet at t\e one or more respective 
locations; and 

processing the recorded \information to analyze a 
route of the at least one intercepted packet through the 
network. 

2. A method according to claim l\ wherein specifying 
the at least one packet filtering criterion comprises 
specifying a pattern of data to appear i\ the one or more 
packets to be transmitted. 

3. A method according to claim 1, wherern specifying 
the at least one packet filtering criterion, comprises 
specifying information associated with a data protocol in 
accordance with which the packets are to be transmitted. 

4. A method according to claim 3, wherein specifying 
the information associated with the data protocol 
comprises specifying a Transport Control Protocol \TCP) 
sequence number to be assigned to the one or more packets 
to be transmitted. 
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5. A method according to claim 4, wherein the TCP 
sequence \jumber comprises an acknowledgment sequence 
number. 

6. A method\according to claim 1, wherein the plurality 
of end-points\ comprises a source end-point and a 
destination endVpoint, and 

wherein transmitting the one or more data packets 
comprises transmitting original packets from the source 
end-point to the\ destination end-point, and receiving 
echo packets returned from the destination end-point, 
both the original \nd the echo packets meeting the at 
least one criterion. 

7. A method according to claim 1, wherein the network 
agents comprise Remote Network Monitoring (RMON) 
elements, in accordance \ with one or more applicable 
standards defined by the Internet Engineering Task Force 
(IETF) . 

8. A method according to cjNaim 1, wherein the network 
agents comprise software processes running on nodes of 
the network at the respective locations. 

9. A method according to claim \L, wherein the network 
agents comprise stand-alone probes 

10. A method according to claim 1, wherein recording the 
information comprises recording times\of arrival of the 
at . _least one intercepted packet a\ the respective 
locations . 

11. A method according to claim 10, wherein processing 
the recorded information comprises \ determining, 
responsive to the times of arrival, transit\ times of the 
at least one intercepted packet over network links 
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connected to the, respective locations and traversed by 
the at least one intercepted packet. 

12. A method according to claim 11, wherein intercepting 
the at least one \ of the data packets comprises 
intercepting multiple^ data packets, and wherein 
determining the transit times comprises • detecting a 
jitter in transit of the Vpackets over one of the links. 

13. A method according alaim 11, wherein the plurality 
of end-points comprises \ a source end-point and a 
destination end-point, and 

wherein transmitting tiLhe one or more data packets 
comprises transmitting original packets from the source 
end-point to the destination end-point, and receiving 
corresponding echo packets returned from the destination 
end-point, both the original a\d the echo packets meeting 
the criterion, and 

wherein determining the Y rans: "- t times comprises 
determining round-trip transit titties by intercepting both 
the original packets and the corresponding echo packets. 

14. A method according to claim 13V wherein transmitting 
the original packets comprises transmitting a Transport 
Control Protocol (TCP) initialization packet having a 
first, specified TCP sequence number, Vand 

wherein receiving the echo Vpackets comprises 
receiving a TCP connection acknowledgment packet having a 
second TCP sequence "number, whicm is determined 
responsive to the first TCP sequence number. 

15. A method according to claim 1, wheurein processing 
the recorded information comprises determining which of a 
plurality of links in the network were traversed by the 
at least one intercepted packet 
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16. Apparatus for testing of a communication network 
having a plurality of endpoints and nodes connected by 
links, comprising: 

one or more\network agents, adapted to be coupled to 

the network at respective locations and to intercept data 

packets that meet a predetermined packet filtering 

\ 

criterion and travetse the respective locations, and to 
record information \ regarding the intercepted data 
packets; and 

a testing centerA configured to convey the criterion 
to the network agents and to cause one or more data 
packets meeting the cruterion to be transmitted through 
the network from one of\the end-points to another, and to 
process the information recorded by the network agents in 
order to analyze a route\of the at least one intercepted 
packet through the networl 

17. Apparatus according t)a claim 16, and comprising at 
least one traffic agent, which is configured to receive 
instructions from the testYng center and, responsive 
thereto, to transmit the paakets meeting the criterion 
from the one of the end-points \to the other. 

18. Apparatus according to claim 17, wherein the packet 
filtering criterion comprises a pattern of data that is 
included in the packets transmitted by the at least one 
traffic agent. 

19. ""Apparatus according" to claim \ 18, wherein the at 
least one traffic agent comprises; first and second 
traffic agents at respective network endpoints, and 

wherein responsive to receiving (sine of the packets 
with the pattern of data transmitted by\the first traffic 
agent, the second traffic agent return^ a data ^packet 

_ V 
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comprising \the pattern of data to the first traffic 
agent . 

20. Apparatus \ccording to claim 17, wherein the packet 
filtering criterion comprises information associated with 

a data protocol \n accordance with which the traffic 

\ 

agent transmits the packets. 

21. Apparatus according to claim 20, wherein the 
information associated\ with the data protocol comprises a 
Transport Control Protdcol (TCP) sequence number used by 
the at least one traffic\ agent . 

22. Apparatus according\ to claim 16, wherein the 
plurality of end-points comprises a source end-point and 
a destination end-point, anti wherein the one or more data 
packets meeting the criterion comprise original packets 
sent from the source endVpoint to the destination 
end-point and echo packets returned from the destination 
end-point responsive to the Original packets, both the 
original and the echo packets meeting the criterion. 

23. Apparatus according to claift 16, wherein the network 
agents comprise Remote NetwoVk Monitoring (RMON) 
elements, in accordance with ohte or more applicable 
standards defined by the Internet Engineering Task Force 
(IETF). \ 

24. Apparatus according to claim 16, Werein the network 
agents comprise softwaar^ processes runViing on the nodes 
of the network at the respective locations. 

25. Apparatus according to claim 16, wheVein the network 
agents comprise stand-alone probes. \ 

26. Apparatus according to claim 16, wherein the one or 
more network agents are operative to record times of 
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arrival \pf the at least one intercepted packet at the 
respective, locations . 

27. Apparatus according to claim 26, wherein the testing 
center is operative to determine, responsive to the 
recorded times o\f arrival, transit times of the at least 
one intercepted packet over the network links connected 
to the respective \ocations and traversed by the at least 
one intercepted packtet. 

28. Apparatus according to claim 27, wherein the one or 
more network agents atfe operative to intercept multiple 
data packets, and whereYn the testing center is adapted 
to detect a jitter in traNnsit of the packets over one of 
the links. \ 

29. Apparatus according claVm 2 6, wherein the determined 
transit times comprises Vound-trip transit • times, 
determined by transmitting original packets from a source 
end-point to a destination end-point, and receiving 
corresponding echo packets returned from the destination 
end-point responsive to the original packets, both the 
original and the echo packets meetdVig the criterion, 

wherein both the original^ packets and the 
corresponding echo packets are intercepted by the one or 
more network agents . \ 

30. Apparatus according to claim 16, wherein the testing 
center is operative to determine whicn of the links in 
the network were traversed by the\ at least one 
intercepted packet. \ 

31. A computer software product for \ testing of a 
communication network having a plurality ®f end-points, 
using one or more network agents coupled t® the network 
at respective locations, the product c^riprising -^a 
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computer-readable medium in which program instructions 
are stored, which instructions, when read by a computer, 
cause the computer to specify a packet filtering 
criterion and to\engender transmission of one or more 
data packets meetirkj the criterion through the network 
from one of the end-points to another, such that at least 
one of the data packets meeting the criterion is 
intercepted using the \network agents at the respective 
locations in the network, traversed by the packets, which 
agents record information regarding the at least one 
intercepted packet at the Respective locations, and which 
instructions further causeXthe computer to receive and 
process the recorded information so as to analyze a route 
of the at least one intercepted packet through the 
network. \ 



